Citrix Workspace APP - Fail to launch session with SSL Error 37 (SSL_STATUS_ALERT_HANDSHAKE_FAILED)
Article ID: CTX696802
Updated On:
Description
Following logs sample appear in trace of CWA(Citrix Workspace App)
Cause
This error is raised when:CWA's OpenSSL receives the backend server(Netscaler gateway, or intermeidate network device) ServerHello that does NOT include the renegotiation_info extension (RFC 5746), while SSL_OP_LEGACY_SERVER_CONNECT is not set. OpenSSL treats the absence of renegotiation_info from the server as an unsafe legacy peer and aborts.
Resolution
Adding the renegotiation_info extension (RFC 5746) in the ServerHello message from the backend server can resolve the issue.
If Citrix NetScaler (ADC) is deployed and functioning as the ICA Proxy, configuring denySSLReneg to NONSECURE on the NetScaler, as described in CTX123680, may resolve the error.
Issue/Introduction
Unable to launch sessions with SSL error 37 after upgrading to Citrix Workspace App 26.3
Was this article helpful?
Yes
No
Powered by
